I agree with you; you should have tested your product with several security companies, since they claim to be the best wallet and we trust them. I believe the attacker went through all the companies doing that and left Coldcard for last, thinking it was the most reliable, and voila! It's a sad day for Bitcoiners!